Hierarchical Navigation

Viewing Options

The Cisco® Intrusion Detection System Services Module (IDSM-2) 2-Gbps bundle is an integrated network security solution that enables organizations to minimize risk, maximize business continuity, and scale to multigigabit environments while optimizing productivity.

Cisco intrusion detection and prevention (IDS/IPS) solutions enable organizations to protect their connected business assets from threats and increase their operating efficiency. As part of the Cisco Systems
® family of IDS/IPSsolutions, the Cisco IDSM-2 bundle provides protection for data network infrastructures that require multigigabit performance. Network threats continue to increase in complexity; as a result, an organization's security solution must provide effective network intrusion prevention while maintaining business continuity.

The Cisco IDSM-2 bundle combines market-leading intrusion prevention and switching into a single system that provides up to 2 Gbps of intrusion prevention performance. The bundle includes the Cisco Catalyst
® 6506-E Switch chassis, the Cisco Catalyst 6500 Supervisor Engine 32, and four Cisco IDSM-2s.

With an installed base in the hundreds of thousands, the widely deployed Cisco Catalyst chassis is a logical platform for additional services such as firewall, VPN, and IDS/IPS. The Cisco IDSM-2 is a second-generation module for Cisco Catalyst chassis, providing unique benefits to customers seeking IDS/IPS attack protection. Cisco IPS Sensor Software Version 5.x delivers inline IPS capabilities to the Cisco IDSM-2.

Features and Benefits

Table 1 lists features of the Cisco IDSM-2 bundle.

Table 1. Cisco IDSM-2 Bundle Features

Features

Details

Multigigabit Scalability

The IDSM-2 bundle provides 2 Gbps of IPS performance using 4 IDSM-2s

Hot Swap Modules

IDSM-2 insertion/removal never affects the Cisco Catalyst switch

Cisco Catalyst Chassis Benefits

• Cisco EtherChannel
® load balancing

• Supervisor engine and power redundancy

• Port density

• Combining with other services modules to provide a scalable security solution

WAN Interoperability Support

FlexWAN support

Accurate Prevention Technologies

Advanced false positive reduction features provide confidence in data passed to the internal network by the user-adjustable Meta Event Generator and Risk Rating features

Multiple Capture Techniques

• Multiple techniques include SPAN/RSPAN; VLAN access control list (ACL) capture combined with shunning; TCP resets when in passive mode; and drop actions when used inline

Cisco is the only vendor to provide an in-switch IDS/IPS solution supplying access to the data stream via VLAN ACL capture

Standardized Code Base

• Uses the same IPS code as the award-winning Cisco IPS 4200 Series appliances, allowing users to standardize on a single management technique

• Simplifies and speeds up installation, training, operation, and support

Optional anti-X Integrated Services

Partnership with Trend Micro augments Cisco's native detection and mitigation capabilities with the most complete anti-X updates for timely recognition and prevention of malware-based threats

Single Device Management Using CLI or Cisco IPS Device Manager (IDM)

• Module can be configured using the CLI, which is available locally or remotely via Telnet or Secure Shell (SSH)

• Cisco IDM is a Web-based tool for sensor configuration and management. It can be accessed through Internet Explorer, Netscape, or Mozilla, and is enabled by default to use Secure Sockets Layer (SSL).

Cisco offers a wide range of services programs to accelerate customer success. These innovative services programs are delivered through a unique combination of people, processes, tools, and partners, resulting in high levels of customer satisfaction. Cisco services help you to protect your network investment, optimize network operations, and prepare the network for new applications to extend network intelligence and the power of your business. For more information about Cisco Services, see
Cisco Technical Support Services or
Cisco Advanced Services.